Secure compute
Isolation, least privilege, and runtime hardening in Forgeon.
Last updated: 2026-03-17
Forgeon applies secure defaults to runtime environments.
Defaults
- Non‑root runtime
- Read‑only filesystem (where supported)
- Minimal capabilities
What you control
- Environment variables
- Runtime scaling
- Network exposure (domains)
Recommendations
- Keep secrets in env vars (never in repo)
- Use staging to validate before production